PT-2025-38453 · Linux+3 · Linux Kernel+3

Published 2023-02-21 · Updated 2026-05-26 · CVE-2023-53434

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:L/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains an issue in the remoteproc subsystem, specifically within the imx dsp rproc component. The vulnerability relates to improper handling of memory writes to the IRAM of i.MX DSP Cores. Hardware specifications dictate that only 32-bit writes are permitted; otherwise, a kernel panic may occur. To address this, custom memory copy and memset functions were implemented to adhere to this restriction. The IRAM is part of the HiFi DSP.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Resource Release

Weakness Enumeration

CWE-404

Related Identifiers

BDU:2025-12986

CVE-2023-53434

Affected Products

Debian

Hifi Dsp

Linux Kernel

I.Mx Dsp Cores

References · 23

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53434.json · Exploit
• https://git.kernel.org/stable/c/331cd77f3d02c35f98b48d1aa934c54c4e7102c8 · Patch
• https://osv.dev/vulnerability/BELL-CVE-2023-53434 · Vendor Advisory
• https://git.kernel.org/stable/c/408ec1ff0caa340c57eecf4cbd14ef0132036a50 · Patch
• https://git.kernel.org/stable/c/44361033a8806aabd0f49b24e5a2fc07232cc5ff · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-53434 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-53434 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-53434 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2023-53434 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-53434 · Security Note
• https://bdu.fstec.ru/vul/2025-12986 · Security Note
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2023-53434 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-53434 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-53434 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-53434 · Security Note